About this course
Course Overview
This five-day course is designed to serve as the ultimate preparation for the Juniper Networks Certified Internet Expert—Security (JNCIE-SEC) exam. The course focuses on caveats and tips useful for potential test candidates and emphasizes hands-on practice through a series of timed lab simulations. On the final day of the course, students are given a six hour lab simulation emulating the testing topics and environment from the real exam. This course is based on Junos OS Release 15.1X49-D50.3 for SRX Series devices. JNCIE Security Bootcamp (JNCIE-SEC) is an advanced-level course.
Target Audience
This course benefits individuals who have already honed their skills on enterprise security technologies and could use some practice and tips in preparation for the JNCIE-SEC exam.
Course Objectives
- After successfully completing this course, you should:
- Be better prepared for success in taking the actual JNCIE-SEC exam.
- Be well-versed in exam topics, environment, and conditions.
Course Content
- Chapter 1: Course Introduction
- Chapter 2: Exam Strategies
- Preparing for Your Exam
- The Testing Environment
- State of the Network
- Testing Tips
- Exam Completion
- Chapter 3: Infrastructure Concepts
- NTP
- Syslog
- User Accounts and Authentication
- Security Zones
- Services
- Infrastructure and Zones Lab
- Chapter 4: Building Clusters
- Chassis Clusters
- Node/Redundancy/RETH Groups
- Active/Passive vs. Active/Active
- Failover
- Creating Clusters Lab
- Chapter 5: Security Policies
- Policy Configuration
- Advanced Policy Options
- Schedulers
- ALGs
- Authorization
- Bypass Flow Forwarding
- Logging
- Building Security Policies Lab
- Chapter 6: IPsec VPNs
- Policy-based IPsec VPNs
- Route-based IPsec VPNs
- NHTB
- Dynamic Routing over IPsec VPNs
- Certificate-based IPsec VPNs
- Public Key Infrastructure
- Traceoptions
- Interoperability
- Building IPsec VPNs Lab
- Chapter 7: Network Address Translation
- Source NAT
- Destination NAT
- Static NAT
- Overlapping IP addresses
- Proxy ARP
- NAT Interaction with Security Policies
- Network Address Translation Lab
- Chapter 8: Attack Prevention
- IDP Logging
- IDP Custom Policies
- IDP Automatic Updates
- Stateless Filters
- Flow Options
- Attack Prevention Lab
- Chapter 9: Unified Threat Management and Screen Options
- Anti-virus
- Web Filtering
- Screen Options
- UTM and Screen Options Lab
- Chapter 10: Extended Implementation Concepts
- Transparent Mode
- Filter-based Forwarding
- Extended Implementations Lab
- Final Day
- JNCIE-SEC Full Lab Simulation
Course Prerequisites
Students should have passed the Juniper Networks Certified Internet Professional—Security (JNCIP-SEC) written exam or achieved an equal level of expertise through Education Services courseware and hands-on experience.
Recommended prerequisites:
- AJSEC - Advanced Junos Security
- JIPS - Junos Intrusion prevention System Functionality
- JSEC - Junos Security
- JUTM - Junos Unified Threat Management
